[ZOOKEEPER-4626] Replace log4j 1.x with reload4j

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.7.1
• Component/s: security
• Assignee: Dagang Wei
• Reporter: Sanjay Kumar Sahu
• Created: 21/Oct/22 19:41
• Updated: 22/Oct/22 05:07
• Resolved: 22/Oct/22 03:23

Description

log4j 1 was replaced with reload4j which is fork of log4j 1.2.17 with the goal of fixing pressing security issues.

As proposed in the dev mailing list (https://lists.apache.org/thread/fdzkv80mzkf3w74z9120l0k0rc3v7kqk) let's replace log4j 1 with reload4j .

Issue Links

• duplicates: ZOOKEEPER-4455 Move to https://reload4j.qos.ch/ (remove log4j1)